CN113778711B - Event processing method and device, electronic equipment and storage medium - Google Patents

Event processing method and device, electronic equipment and storage medium Download PDF

Info

Publication number
CN113778711B
CN113778711B CN202111057288.2A CN202111057288A CN113778711B CN 113778711 B CN113778711 B CN 113778711B CN 202111057288 A CN202111057288 A CN 202111057288A CN 113778711 B CN113778711 B CN 113778711B
Authority
CN
China
Prior art keywords
event
processed
current
processing
determining
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Active
Application number
CN202111057288.2A
Other languages
Chinese (zh)
Other versions
CN113778711A (en
Inventor
何欣阳
张录录
李雪峰
尚程
傅强
蔡琳
梁彧
田野
王杰
杨满智
金红
陈晓光
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Eversec Beijing Technology Co Ltd
Original Assignee
Eversec Beijing Technology Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Eversec Beijing Technology Co Ltd filed Critical Eversec Beijing Technology Co Ltd
Priority to CN202111057288.2A priority Critical patent/CN113778711B/en
Publication of CN113778711A publication Critical patent/CN113778711A/en
Application granted granted Critical
Publication of CN113778711B publication Critical patent/CN113778711B/en
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Classifications

    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F9/00Arrangements for program control, e.g. control units
    • G06F9/06Arrangements for program control, e.g. control units using stored programs, i.e. using an internal store of processing equipment to receive or retain programs
    • G06F9/46Multiprogramming arrangements
    • G06F9/54Interprogram communication
    • G06F9/542Event management; Broadcasting; Multicasting; Notifications
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F18/00Pattern recognition
    • G06F18/20Analysing
    • G06F18/24Classification techniques
    • G06F18/241Classification techniques relating to the classification model, e.g. parametric or non-parametric approaches

Landscapes

  • Engineering & Computer Science (AREA)
  • Theoretical Computer Science (AREA)
  • Physics & Mathematics (AREA)
  • Data Mining & Analysis (AREA)
  • Software Systems (AREA)
  • General Physics & Mathematics (AREA)
  • General Engineering & Computer Science (AREA)
  • Bioinformatics & Cheminformatics (AREA)
  • Evolutionary Computation (AREA)
  • Evolutionary Biology (AREA)
  • Computer Vision & Pattern Recognition (AREA)
  • Bioinformatics & Computational Biology (AREA)
  • Artificial Intelligence (AREA)
  • Multimedia (AREA)
  • Life Sciences & Earth Sciences (AREA)
  • Debugging And Monitoring (AREA)

Abstract

The embodiment of the invention discloses an event processing method, an event processing device, electronic equipment and a storage medium. The event processing method specifically comprises the following steps: acquiring a first event to be processed; determining at least one currently processed event processed by an event processing system of a current event suppression period; and under the condition that the first event to be processed and one of the current events to be processed are the same type of event, carrying out inhibition processing on the first event to be processed. The technical scheme of the embodiment of the invention can improve the event processing efficiency and the accuracy.

Description

Event processing method and device, electronic equipment and storage medium
Technical Field
The embodiment of the invention relates to the technical field of computers, in particular to an event processing method, an event processing device, electronic equipment and a storage medium.
Background
Event processing refers to processing an activity call related program or routine which randomly occurs in the management system, so that the management system operates normally. When receiving the event processing task, the management system reports the event processing task to the event processing system to process the event.
However, after the event processing task is reported by the existing management system, if the event processing task identical to the event processing task is received again, the management system still reports the identical event processing task to the event processing system for processing, so that the event processing system repeatedly executes the event processing task of the same type, thereby increasing the burden of the system and reducing the event processing efficiency and accuracy.
Disclosure of Invention
The embodiment of the invention provides an event processing method, an event processing device, electronic equipment and a storage medium, which can improve event processing efficiency and accuracy.
In a first aspect, an embodiment of the present invention provides an event processing method, including:
acquiring a first event to be processed;
determining at least one currently processed event processed by an event processing system of a current event suppression period;
and under the condition that the first event to be processed and one of the current events to be processed are the same type of event, carrying out inhibition processing on the first event to be processed.
In a second aspect, an embodiment of the present invention further provides an event processing apparatus, including:
the event acquisition module to be processed is used for acquiring a first event to be processed;
A current processing event determining module, configured to determine at least one current processing event processed by the event processing system in a current event suppression period;
and the event suppression module is used for suppressing the first event to be processed under the condition that the first event to be processed and one of the current events to be processed are the same type of event.
In a third aspect, an embodiment of the present invention further provides an electronic device, including:
one or more processors;
a storage means for storing one or more programs;
the one or more programs, when executed by the one or more processors, cause the one or more processors to implement the event processing methods provided by any of the embodiments of the present invention.
In a fourth aspect, an embodiment of the present invention further provides a computer storage medium having stored thereon a computer program which, when executed by a processor, implements the event processing method provided by any embodiment of the present invention.
According to the embodiment of the invention, the first event to be processed is acquired, and at least one current processing event processed by the event processing system in the current event suppression period is determined, so that suppression processing is carried out on the first event to be processed under the condition that the first event to be processed and one of the current processing events are the same type of event, the problems of low event processing efficiency, poor accuracy and the like caused by the fact that the existing event processing system repeatedly executes the same type of event processing task are solved, and the event processing efficiency and accuracy can be improved.
Drawings
FIG. 1 is a flowchart of a method for event processing according to a first embodiment of the present invention;
FIG. 2 is a flowchart of a method for event processing according to a second embodiment of the present invention;
FIG. 3 is a flowchart of a specific example of an event processing method according to a second embodiment of the present invention;
fig. 4 is a schematic diagram of an event processing device according to a third embodiment of the present invention;
fig. 5 is a schematic structural diagram of an electronic device according to a fourth embodiment of the present invention.
Detailed Description
The invention is described in further detail below with reference to the drawings and examples. It is to be understood that the specific embodiments described herein are merely illustrative of the invention and are not limiting thereof.
It should be further noted that, for convenience of description, only some, but not all of the matters related to the present invention are shown in the accompanying drawings. Before discussing exemplary embodiments in more detail, it should be mentioned that some exemplary embodiments are described as processes or methods depicted as flowcharts. Although a flowchart depicts operations (or steps) as a sequential process, many of the operations can be performed in parallel, concurrently, or at the same time. Furthermore, the order of the operations may be rearranged. The process may be terminated when its operations are completed, but may have additional steps not included in the figures. The processes may correspond to methods, functions, procedures, subroutines, and the like.
The terms first and second and the like in the description and in the claims and drawings of embodiments of the invention are used for distinguishing between different objects and not necessarily for describing a particular sequential or chronological order. Furthermore, the terms "comprise" and "have," as well as any variations thereof, are intended to cover a non-exclusive inclusion. For example, a process, method, system, article, or apparatus that comprises a list of steps or elements is not necessarily limited to the listed steps or elements but may include steps or elements not expressly listed.
Example 1
Fig. 1 is a flowchart of an event processing method according to a first embodiment of the present invention, where the present embodiment may be applied to a case of performing suppression processing on an event of the same type of the currently processed event when the event is processed, where the method may be performed by an event processing apparatus, and the apparatus may be implemented by software and/or hardware, and may generally be directly integrated into an electronic device that performs the method. As shown in fig. 1, the event processing method may include the steps of:
s110, acquiring a first event to be processed.
The event may be any program or routine related to an activity call, for example, a Trojan event or an IP (Internet Protocol ) address change event, which is not limited by the embodiment of the invention. The first event to be processed may be an event to be processed, for example, any event to be processed may be any event to be processed, or an event to be processed that satisfies a specific condition, which is not limited in the embodiment of the present invention.
In the embodiment of the present invention, the first event to be processed may be obtained when the event to be processed is triggered, or may be obtained a first event to be processed waiting in an event queue, etc., which is not limited in the embodiment of the present invention.
S120, determining at least one current processing event processed by the event processing system of the current event suppression period.
The event suppression period may be a suppression period of a processing event, and may be used to suppress processing of the same event as the processing event for one cycle. The event suppression periods of different events may be different or the same, and the specific time period of the event suppression period is not limited in the embodiment of the present invention. The event suppression period may be an unfixed period determined in real time according to the event type, or may be a preset fixed period, which is not limited in the embodiment of the present invention. The current event suppression period may be a suppression period of a current processing event, and may be used to suppress processing of the same event as the current processing event. The event processing system may be any system that processes events to be processed. It will be appreciated that the event processing system may process only one event, or may process multiple events simultaneously, as the embodiments of the present invention are not limited in this respect. The currently processed event may be an event being processed in an event processing system.
In the embodiment of the present invention, after the first event to be processed is acquired, at least one currently processed event processed by the event processing system in the current event suppression period may be further determined, that is, the currently processed event being processed by the event processing system matched with the current event suppression period is determined. It will be appreciated that if the event suppression periods of different events are different, then there is only one event for the currently processed event that matches the current event suppression period. Accordingly, if the event suppression periods of different events are the same, there may be multiple events for the currently processed event that match the current event suppression period.
S130, under the condition that the first event to be processed and one of the current events to be processed are the same type event, inhibiting the first event to be processed.
Specifically, if all the event information of the first event to be processed is the same as the event information corresponding to the current event to be processed, it may be determined that the first event to be processed and the current event to be processed are the same type of event.
In the embodiment of the present invention, after determining at least one current processing event processed by the event processing system in the current event suppression period, it may further be determined whether the first event to be processed and the current processing event are the same type of event. After determining that the first event to be processed and any one of the current events to be processed are the same type of event, the first event to be processed is restrained so as to avoid the event processing system from repeatedly processing the same event. The suppression processing is that the event of the same type of the current processing event is not reported to the event processing system for processing in the same period. Accordingly, if the first event to be processed is not the same type event as all the current events to be processed, the first event to be processed may be reported to the event processing system to perform normal processing on the first event to be processed. According to the technical scheme, the first event to be processed is acquired, at least one current processing event processed by the event processing system in the current event suppression period is determined, so that suppression processing is carried out on the first event to be processed under the condition that the first event to be processed and one of the current processing events are the same type of event, the problems of low event processing efficiency, poor accuracy and the like caused by the fact that the existing event processing system repeatedly executes the same type of event processing task are solved, and the event processing efficiency and accuracy can be improved.
Example two
Fig. 2 is a flowchart of an event processing method according to a second embodiment of the present invention, where further optimization of the above technical solutions provides various specific alternative implementations of determining that the first event to be processed and one of the current events to be processed are the same type of event and performing suppression processing on the first event to be processed. The technical solution in this embodiment may be combined with each of the alternatives in one or more embodiments described above. As shown in fig. 2, the method may include the steps of:
s210, acquiring a first event to be processed.
Optionally, before acquiring the first event to be processed, the method may further include: acquiring a second event to be processed and a target event list; under the condition that the second to-be-processed event is not matched with all the list events in the target event list, the second to-be-processed event is determined to be the current processing event; reporting the second event to be processed to an event processing system for processing; and generating a current event suppression period matched with the second to-be-processed event according to the type of the second to-be-processed event.
Wherein the second event to be processed may be another event that needs to be processed. The target event list may be a list of all events processed by the event processing system. The list event may be an event in a list of target events.
Specifically, if any one of the event information of the second to-be-processed event is different from the event information corresponding to the list event in the target event list, it may be determined that all the second to-be-processed event is not matched with the list event in the target event list. It can be understood that if the second to-be-processed event is not matched with all the list events in the target event list, which means that the second to-be-processed event is the first to occur event, that is, the event processing system does not process the event, the second to-be-processed event can be reported to the event processing system to process the second to-be-processed event.
Specifically, a second event to be processed and a target event list are obtained, and whether the second event to be processed is matched with a list event in the target event list or not is judged. If the second to-be-processed event is not matched with all the list events in the target event list, the second to-be-processed event can be determined to be the current processing event, and the second to-be-processed event is reported to the event processing system for processing. After determining the second to-be-processed event as the current to-be-processed event, the current event suppression period matched with the second to-be-processed event can be further generated according to the type of the second to-be-processed event, so that the event processing system does not process the same event as the second to-be-processed event in the current event suppression period matched with the second to-be-processed event.
Optionally, after reporting the current processing event to the event processing system for processing, the method may further include: and adding the second event to be processed to the target event list so as to update the target event list.
Specifically, after the current processing event is reported to the event processing system for processing, the second event to be processed may be further added to the target event list to update the target event list, so that when the event identical to the second event to be processed is obtained, it may be determined that the event is not the first event according to the updated target event list, and the event processing system has already processed the event, and further may determine further processing of the identical event.
S220, determining at least one current processing event processed by the event processing system of the current event suppression period.
S230, judging whether the first event to be processed and the current event to be processed are the same type event; if yes, executing S240; otherwise, S250 is performed.
In the embodiment of the present invention, after determining at least one current processing event processed by the event processing system in the current event suppression period, it may further be determined whether the first event to be processed and the current processing event are the same type of event. If the first event to be processed and one of the current events to be processed are the same type of event, it can be further determined whether the current system time is less than the current event suppression period, so as to determine whether the event processing system can normally process the first event to be processed. If the first event to be processed and all the current events to be processed are different types of events, the first event to be processed can be reported to the event processing system so as to normally process the first event to be processed.
Alternatively, the event may comprise an event log; the event log may include at least one of event type, event IP, and event content; accordingly, determining that the first event to be processed and one of the current events to be processed are the same type of event may include: determining a first event type to be processed and a first event IP to be processed of the first event to be processed; determining the current processing event type and the current processing event IP of each current processing event; and when the type of the first event to be processed is determined to be the same as the type of the current event to be processed of the target current event and the type of the first event to be processed is determined to be the same as the type of the current event to be processed of the target current event.
The event log may be a log file generated when an event occurs, and may be used to store event related information. By way of example, the event log may include event type, event IP, or event content, among others. The event type may be a classification based on event characteristics. Event IP may be the IP address where the event occurred. The event content may be other information related to the event. By way of example, the event content of a Trojan event may include hazards presented by Trojan, trojan solutions or Trojan risk levels, etc. The first event type to be processed may be an event type of the first event to be processed. The first event to be processed IP may be an event IP of the first event to be processed. The current processing event type may be an event type of the current processing event. The current processing event IP may be an event IP of the current processing event. The target current processing event may be one of a plurality of current processing events. It will be appreciated that if there is only one current processing event, then the current processing event may be determined to be the target current processing event.
Specifically, the first event type to be processed and the first event IP to be processed of the first event to be processed are determined, and the current event type to be processed and the current event IP to be processed of the current event are determined. After determining the first event type to be processed and the first event IP to be processed of the first event, and the current event type to be processed and the current event IP to be processed of each current event to be processed, it may be further determined whether the first event type to be processed is the same as the current event type to be processed of the target current event to be processed, and whether the first event IP to be processed is the same as the current event IP to be processed of the target current event to be processed. If the first event type to be processed is the same as the current event type of the target current event to be processed, and the first event IP to be processed is the same as the current event IP of the target current event to be processed, the first event to be processed and the target current event to be processed can be determined to be the same type event. It will be appreciated that the first event to be processed and the target current event to be processed may be determined to be the same type of event only if the first event to be processed and the target current event to be processed are both the same type of event and the first event to be processed IP and the target current event to be processed are the same.
S240, judging whether the current system time is smaller than the current event suppression period; if yes, executing S260; otherwise, S270 is performed.
Wherein the current system time may be the current time of the system.
In the embodiment of the invention, after determining that the first event to be processed and any one of the current events to be processed are the same type of event, whether the current system time is smaller than the current event suppression period can be further determined. And if the current system time is smaller than the current event suppression period, storing and processing the first event to be processed. It will be appreciated that if the current system time is less than the current event suppression period, indicating that the event processing system is still processing the current processing event, i.e., the event processing system cannot process the same event as the current processing event, the first event to be processed may be stored. Correspondingly, if the current system time is greater than or equal to the current event suppression period, the first event to be processed can be reported to the event processing system so as to process the first event to be processed. It may be understood that if the current system time is greater than or equal to the current event suppression period, which indicates that the event processing system has finished processing the current processing event, the event processing system may succeed in processing the current processing event, or may fail in processing the current processing event, and then the first event to be processed may be reported to the event processing system for normal processing.
S250, reporting the first event to be processed to the event processing system for processing.
Specifically, if any one of the event information of the first event to be processed is different from the event information corresponding to the current event to be processed, it may be determined that the first event to be processed and the current event to be processed are different types of events. Alternatively, if the first to-be-processed event type is different from the current to-be-processed event type, it may be determined that the first to-be-processed event and the current to-be-processed event are different types of events. If the first to-be-processed event IP is different from the current to-be-processed event IP, it may be determined that the first to-be-processed event and the current to-be-processed event are different types of events. If the first event type to be processed is different from the current event type to be processed and the first event IP to be processed is different from the current event IP to be processed, the first event to be processed and the current event to be processed can be determined to be different types of events.
In the embodiment of the present invention, if it is determined that the first event to be processed and the current event to be processed are different types of events, the first event to be processed may be reported to the event processing system, so as to perform normal processing on the first event to be processed. And S260, storing and processing the first event to be processed.
In the embodiment of the invention, after the current system time is determined to be smaller than the current event suppression period, the first event to be processed can be further stored and processed so as to achieve suppression of the first event to be processed.
S270, the first event to be processed is reported to an event processing system so as to process the first event to be processed.
In the embodiment of the invention, after determining that the current system time is greater than or equal to the current event suppression period, the first event to be processed may be further reported to the event processing system, so as to perform normal processing on the first event to be processed.
S280, acquiring a third event to be processed.
Wherein the third pending event may be a further event requiring processing.
In the embodiment of the present invention, after the first event to be processed is suppressed, a third event to be processed may be further acquired to process the third event to be processed.
S290, determining the third to-be-processed event as the current processing event when the third to-be-processed event and one of the processed events are determined to be the same type event and the current system time is greater than or equal to the current event suppression period.
The processed event may be an event processed by the event processing system, for example, a list event in the updated target event list.
In the embodiment of the present invention, after the third to-be-processed event is acquired, it may be further determined whether the third to-be-processed event and the processed event are the same type of event. If the third to-be-processed event and one of the processed events are the same type of event, and the current system time is greater than or equal to the current event suppression period, which indicates that the third to-be-processed event is processed by the event processing system, but the processing failure needs to be reprocessed, or needs to be reprocessed after the processing is successful, the third to-be-processed event can be determined as the current processing event.
And S2100, reporting the third event to be processed to the event processing system for processing.
In the embodiment of the present invention, after determining the third to-be-processed event as the current processing event, the third to-be-processed event may be further reported to the event processing system for processing. It will be appreciated that if the current system time is greater than or equal to the current event suppression period, indicating that the suppression period for the current processed event has ended, the event processing system may process an event of the same type as the processed event, without suppressing the same type of event for the current processed event.
S2110, determining the current event suppression period of the third to-be-processed event matching.
In the embodiment of the invention, after the third to-be-processed event is reported to the event processing system for processing, the current event suppression period matched with the third to-be-processed event can be further determined so as to suppress the same type event of the third to-be-processed event, thereby avoiding the event processing system from repeatedly processing a plurality of events of the same type.
Optionally, the method may further include: determining a third event to be processed as a processing failure event; and determining event processing results according to the processing failure event.
The processing failure event may be an event that the event processing system has not successfully processed. The event processing result may be a result obtained by the event processing system processing the current processing event, for example, may include a cause of processing failure, which is not limited in the embodiment of the present invention.
Specifically, if the third to-be-processed event and one of the processed events are the same type of event, and the current system time is greater than or equal to the current event suppression period, which indicates that the processed event fails to be processed, and the processed event needs to be processed again, it may be determined that the third to-be-processed event is a processing failure event, and further, an event processing result is determined according to the processing failure event.
According to the technical scheme, the event processing result is determined, so that the event processing result is obtained, and the problems of difficulty in system development, low system docking speed and the like caused by the development of the event processing system due to the feedback of the event processing result are avoided.
In order to enable those skilled in the art to better understand the event processing method according to the present embodiment, a specific example is described below, and fig. 3 is a flowchart of a specific example of an event processing method according to a second embodiment of the present invention, and as shown in fig. 3, a specific process includes:
the event source sends events to be processed to various management systems deployed by the communication carrier, and when the management system sends the events to be processed to the event processing system for processing for the first time, the events enter a current event suppression period (the event suppression period is adjustable, for example, suppression is carried out for 24 hours); during the current event suppression period, the management system stores and processes all the events to be processed reported by the event source and the same event IP and the same event type of the current event to be processed in the event processing system, and does not report the events to the event processing system; and after the event suppression period, if the management system finds the event to be processed with the same event IP and the same event type again, judging that the event is not processed, and reporting the event to be processed to the event processing system for processing. And if the management system does not find the pending event with the same event IP and the same event type after the event suppression period, judging that the event is treated.
According to the technical scheme, the first event to be processed is obtained, at least one current processing event processed by the event processing system in the current event suppression period is determined, and therefore when the first event to be processed and one of the current processing events are determined to be the same type event, and the current system time is smaller than the current event suppression period, the first event to be processed is stored and processed; under the condition that the first event to be processed and the current event to be processed are determined to be different types of events, reporting the first event to be processed to an event processing system for processing; and then, by acquiring a third event to be processed, and determining the third event to be processed as the current event to be processed under the condition that the third event to be processed and one processed event are the same type event and the current system time is greater than or equal to the current event suppression period, reporting the third event to be processed to an event processing system for processing, and determining the current event suppression period matched with the third event to be processed, the event of the same type of the third event to be processed is suppressed, so that the event processing system is prevented from repeatedly processing a plurality of events of the same type, the problems of low event processing efficiency, poor accuracy and the like caused by repeatedly executing the event processing task of the same type by the existing event processing system are solved, and the event processing efficiency and the event processing accuracy can be improved.
Example III
Fig. 4 is a schematic diagram of an event processing apparatus according to a third embodiment of the present invention, as shown in fig. 4, where the apparatus includes: a pending event acquisition module 410, a current processing event determination module 420, and a pending event suppression module 430, wherein:
a to-be-processed event acquisition module 410, configured to acquire a first to-be-processed event;
a current processing event determination module 420 for determining at least one current processing event processed by the event processing system for a current event suppression period;
the pending event suppression module 430 is configured to perform suppression processing on the first to-be-processed event if it is determined that the first to-be-processed event and one of the current to-be-processed events are the same type of event.
According to the technical scheme, the first event to be processed is acquired, at least one current processing event processed by the event processing system in the current event suppression period is determined, so that suppression processing is carried out on the first event to be processed under the condition that the first event to be processed and one of the current processing events are the same type of event, the problems of low event processing efficiency, poor accuracy and the like caused by the fact that the existing event processing system repeatedly executes the same type of event processing task are solved, and the event processing efficiency and accuracy can be improved.
Alternatively, the event may comprise an event log; the event log may include at least one of event type, event IP, and event content; accordingly, the pending event suppression module 430 may be specifically configured to: determining a first event type to be processed and a first event IP to be processed of the first event to be processed; determining the current processing event type and the current processing event IP of each current processing event; and when the type of the first event to be processed is determined to be the same as the type of the current event to be processed of the target current event and the type of the first event to be processed is determined to be the same as the type of the current event to be processed of the target current event.
Optionally, the pending event suppression module 430 may be further configured to: and when the current system time is determined to be smaller than the current event suppression period, storing and processing the first event to be processed.
Optionally, the event processing apparatus may further include: and the event to be processed reporting module is used for reporting the first event to be processed to the event processing system for processing under the condition that the first event to be processed and the current event to be processed are determined to be different types of events.
Optionally, the pending event acquisition module 410 may be specifically configured to: acquiring a second event to be processed and a target event list; under the condition that the second to-be-processed event is not matched with all the list events in the target event list, the second to-be-processed event is determined to be the current processing event; reporting the second event to be processed to an event processing system for processing; and generating a current event suppression period matched with the second to-be-processed event according to the type of the second to-be-processed event.
Optionally, the pending event acquisition module 410 may be further configured to: and adding the second event to be processed to the target event list so as to update the target event list.
Optionally, the pending event suppression module 430 may be further configured to: acquiring a third event to be processed; determining the third to-be-processed event as a current processing event under the condition that the third to-be-processed event and one of the processed events are determined to be the same type event and the current system time is greater than or equal to the current event suppression period; reporting the third event to be processed to an event processing system for processing; and determining the current event suppression period of the matching of the third to-be-processed event.
Optionally, the pending event suppression module 430 may be further configured to: determining a third event to be processed as a processing failure event; and determining event processing results according to the processing failure event.
The event processing device can execute the event processing method provided by any embodiment of the invention, and has the corresponding functional modules and beneficial effects of the execution method. Technical details not described in detail in this embodiment may be referred to the event processing method provided in any embodiment of the present invention.
Since the event processing apparatus described above is an apparatus capable of executing the event processing method in the embodiment of the present invention, those skilled in the art can understand the specific implementation of the event processing apparatus in the embodiment of the present invention and various modifications thereof based on the event processing method described in the embodiment of the present invention, so how the event processing apparatus implements the event processing method in the embodiment of the present invention will not be described in detail herein. The apparatus used by those skilled in the art to implement the event processing method in the embodiments of the present invention is within the scope of protection intended in the present application.
Example IV
Fig. 5 is a schematic structural diagram of an electronic device according to a fourth embodiment of the present invention. Fig. 5 illustrates a block diagram of an exemplary electronic device 12 suitable for use in implementing embodiments of the present invention. The electronic device 12 shown in fig. 5 is merely an example and should not be construed as limiting the functionality and scope of use of embodiments of the present invention.
As shown in fig. 5, the electronic device 12 is in the form of a general purpose computing device. Components of the electronic device 12 may include, but are not limited to: one or more processors 16, a memory 28, a bus 18 that connects the various system components, including the memory 28 and the processor 16.
Bus 18 represents one or more of several types of bus structures, including a memory bus or memory controller, a peripheral bus, an accelerated graphics port, a processor, and a local bus using any of a variety of bus architectures. By way of example, and not limitation, such architectures include industry standard architecture (Industry Standard Architecture, ISA) bus, micro channel architecture (Micro Channel Architecture, MCA) bus, enhanced ISA bus, video electronics standards association (Video Electronics Standards Association, VESA) local bus, and peripheral component interconnect (Peripheral Component Interconnect, PCI) bus.
Electronic device 12 typically includes a variety of computer system readable media. Such media can be any available media that is accessible by electronic device 12 and includes both volatile and nonvolatile media, removable and non-removable media.
Memory 28 may include computer system readable media in the form of volatile memory, such as random access memory (Random Access Memory, RAM) 30 and/or cache memory 32. The electronic device 12 may further include other removable/non-removable, volatile/nonvolatile computer system storage media. By way of example only, storage system 34 may be used to read from or write to non-removable, nonvolatile magnetic media (not shown in FIG. 5, commonly referred to as a "hard disk drive"). Although not shown in fig. 5, a disk drive for reading from and writing to a removable nonvolatile magnetic disk (e.g., a "floppy disk"), and an optical disk drive for reading from and writing to a removable nonvolatile optical disk (e.g., a Compact Disc-Read Only Memory (CD-ROM), digital versatile Disc (Digital Video Disc-Read Only Memory, DVD-ROM), or other optical media) may be provided. In such cases, each drive may be coupled to bus 18 through one or more data medium interfaces. Memory 28 may include at least one program product having a set (e.g., at least one) of program modules configured to carry out the functions of embodiments of the invention.
A program/utility 40 having a set (at least one) of program modules 42 may be stored in, for example, memory 28, such program modules 42 including, but not limited to, an operating system, one or more application programs, other program modules, and program data, each or some combination of which may include an implementation of a network environment. Program modules 42 generally perform the functions and/or methods of the embodiments described herein.
The electronic device 12 may also communicate with one or more external devices 14 (e.g., keyboard, pointing device, display 24, etc.), one or more devices that enable a user to interact with the electronic device 12, and/or any devices (e.g., network card, modem, etc.) that enable the electronic device 12 to communicate with one or more other computing devices. Such communication may be via an Input/Output (I/O) interface 22. Also, the electronic device 12 may communicate with one or more networks (e.g., local area network (Local Area Network, LAN), wide area network Wide Area Network, WAN) and/or a public network, such as the internet) via the network adapter 20. As shown, the network adapter 20 communicates with other modules of the electronic device 12 over the bus 18. It should be appreciated that although not shown in fig. 5, other hardware and/or software modules may be used in connection with electronic device 12, including, but not limited to: microcode, device drivers, redundant processing units, external disk drive arrays, (Redundant Arrays of Independent Disks, RAID) systems, tape drives, data backup storage systems, and the like.
The processor 16 executes programs stored in the memory 28 to perform various functional applications and data processing, implementing the event processing method provided by the embodiment of the present invention: acquiring a first event to be processed; determining at least one currently processed event processed by an event processing system of a current event suppression period; and under the condition that the first event to be processed and one of the current events to be processed are the same type of event, carrying out inhibition processing on the first event to be processed.
Example five
A fifth embodiment of the present invention further provides a computer storage medium storing a computer program, which when executed by a computer processor is configured to perform the event processing method according to any one of the above embodiments of the present invention: acquiring a first event to be processed; determining at least one currently processed event processed by an event processing system of a current event suppression period; and under the condition that the first event to be processed and one of the current events to be processed are the same type of event, carrying out inhibition processing on the first event to be processed.
The computer storage media of embodiments of the invention may take the form of any combination of one or more computer-readable media. The computer readable medium may be a computer readable signal medium or a computer readable storage medium. The computer readable storage medium can be, for example, but not limited to, an electronic, magnetic, optical, electromagnetic, infrared, or semiconductor system, apparatus, or device, or a combination of any of the foregoing. More specific examples (a non-exhaustive list) of the computer-readable storage medium would include the following: an electrical connection having one or more wires, a portable computer diskette, a hard disk, a Random Access Memory (RAM), a Read-Only Memory (ROM), an erasable programmable Read-Only Memory ((Erasable Programmable Read Only Memory, EPROM) or flash Memory), an optical fiber, a portable compact disc Read-Only Memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the foregoing. In this document, a computer readable storage medium may be any tangible medium that can contain, or store a program for use by or in connection with an instruction execution system, apparatus, or device.
The computer readable signal medium may include a propagated data signal with computer readable program code embodied therein, either in baseband or as part of a carrier wave. Such a propagated data signal may take any of a variety of forms, including, but not limited to, electro-magnetic, optical, or any suitable combination of the foregoing. A computer readable signal medium may also be any computer readable medium that is not a computer readable storage medium and that can communicate, propagate, or transport a program for use by or in connection with an instruction execution system, apparatus, or device.
Program code embodied on a computer readable medium may be transmitted using any appropriate medium, including but not limited to wireless, wireline, optical fiber cable, radio Frequency (RF), etc., or any suitable combination of the foregoing.
Computer program code for carrying out operations of the present invention may be written in any combination of one or more programming languages, including an object oriented programming language such as Java, smalltalk, C ++ and conventional procedural programming languages, such as the "C" programming language or similar programming languages. The program code may execute entirely on the user's computer, partly on the user's computer, as a stand-alone software package, partly on the user's computer and partly on a remote computer or entirely on the remote computer or server. In the case of a remote computer, the remote computer may be connected to the user's computer through any kind of network, including a Local Area Network (LAN) or a Wide Area Network (WAN), or may be connected to an external computer (for example, through the Internet using an Internet service provider).
Note that the above is only a preferred embodiment of the present invention and the technical principle applied. It will be understood by those skilled in the art that the present invention is not limited to the particular embodiments described herein, but is capable of various obvious changes, rearrangements and substitutions as will now become apparent to those skilled in the art without departing from the scope of the invention. Therefore, while the invention has been described in connection with the above embodiments, the invention is not limited to the embodiments, but may be embodied in many other equivalent forms without departing from the spirit or scope of the invention, which is set forth in the following claims.

Claims (9)

1. An event processing method, comprising:
acquiring a first event to be processed;
determining at least one currently processed event processed by an event processing system of a current event suppression period;
under the condition that the first event to be processed and one of the current events to be processed are the same type of event, carrying out inhibition processing on the first event to be processed;
the current event suppression period is a period of time when the same type of event of the current processing event cannot be processed;
the suppressing the first event to be processed includes: in the current event suppression period, the first event to be processed is not reported to an event processing system for processing;
The event includes an event log; the event log includes at least one of event type, event IP, and event content;
the determining that the first event to be processed and one of the current events to be processed are the same type of event includes:
determining a first to-be-processed event type and a first to-be-processed event IP of the first to-be-processed event;
determining the current processing event type and the current processing event IP of each current processing event;
when the type of the first event to be processed is determined to be the same as the type of the current event to be processed of the target current event and the IP of the first event to be processed is determined to be the same as the IP of the current event to be processed of the target current event, determining that the first event to be processed and the target current event to be processed are the same type of event;
before the acquiring the first event to be processed, the method further comprises:
acquiring a second event to be processed and a target event list;
under the condition that the second to-be-processed event is not matched with all list events in the target event list, determining the second to-be-processed event as the current processing event;
reporting the second event to be processed to the event processing system for processing;
Generating a current event suppression period matched with the second to-be-processed event according to the type of the second to-be-processed event;
the target event list is a list of all events processed by the event processing system.
2. The method of claim 1, wherein said suppressing the first event to be processed comprises:
when the current system time is determined to be smaller than the current event suppression period, storing and processing the first event to be processed;
wherein said determining that the current system time is less than the current event suppression period comprises:
and determining a time point when the current system time is less than the end of the current event suppression period.
3. The method as recited in claim 1, further comprising:
and under the condition that the first event to be processed and the current event to be processed are different types of events, reporting the first event to be processed to the event processing system for processing.
4. The method of claim 1, further comprising, after said reporting said currently processed event to said event processing system for processing:
and adding the second event to be processed to the target event list so as to update the target event list.
5. The method of claim 1, further comprising, after the suppressing the first event to be processed:
acquiring a third event to be processed;
determining the third to-be-processed event as the current processing event under the condition that the third to-be-processed event and one of the processed events are the same type event and the current system time is greater than or equal to the current event suppression period;
reporting the third event to be processed to the event processing system for processing;
determining a current event suppression period of the third to-be-processed event matching;
wherein the current system time is greater than or equal to the current event suppression period, comprising:
the current system time is greater than or equal to the point in time at which the current event suppression period ends.
6. The method as recited in claim 5, further comprising:
determining the third event to be processed as a processing failure event;
and determining an event processing result according to the processing failure event.
7. An event processing apparatus, comprising:
the event acquisition module to be processed is used for acquiring a first event to be processed;
a current processing event determining module, configured to determine at least one current processing event processed by the event processing system in a current event suppression period;
The event suppression module to be processed is used for suppressing the first event to be processed under the condition that the first event to be processed and one of the current events to be processed are the same type of event;
the current event suppression period is a period of time when the same type of event of the current processing event cannot be processed;
wherein the event suppression module to be processed comprises a suppression processing unit,
the suppression processing unit is used for not reporting the first event to be processed to the event processing system for processing in the current event suppression period;
the event includes an event log; the event log includes at least one of event type, event IP, and event content;
the event suppression module to be processed is specifically used for: determining a first to-be-processed event type and a first to-be-processed event IP of the first to-be-processed event;
determining the current processing event type and the current processing event IP of each current processing event;
when the type of the first event to be processed is determined to be the same as the type of the current event to be processed of the target current event and the IP of the first event to be processed is determined to be the same as the IP of the current event to be processed of the target current event, determining that the first event to be processed and the target current event to be processed are the same type of event;
The event acquisition module to be processed is specifically used for: acquiring a second event to be processed and a target event list;
under the condition that the second to-be-processed event is not matched with all list events in the target event list, determining the second to-be-processed event as the current processing event;
reporting the second event to be processed to the event processing system for processing;
generating a current event suppression period matched with the second to-be-processed event according to the type of the second to-be-processed event;
the target event list is a list of all events processed by the event processing system.
8. An electronic device, the electronic device comprising:
one or more processors;
a storage means for storing one or more programs;
the one or more programs, when executed by the one or more processors, cause the one or more processors to implement the event processing method of any of claims 1-6.
9. A computer storage medium having stored thereon a computer program, which when executed by a processor implements the event processing method as claimed in any of claims 1-6.
CN202111057288.2A 2021-09-09 2021-09-09 Event processing method and device, electronic equipment and storage medium Active CN113778711B (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN202111057288.2A CN113778711B (en) 2021-09-09 2021-09-09 Event processing method and device, electronic equipment and storage medium

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN202111057288.2A CN113778711B (en) 2021-09-09 2021-09-09 Event processing method and device, electronic equipment and storage medium

Publications (2)

Publication Number Publication Date
CN113778711A CN113778711A (en) 2021-12-10
CN113778711B true CN113778711B (en) 2024-04-16

Family

ID=78842199

Family Applications (1)

Application Number Title Priority Date Filing Date
CN202111057288.2A Active CN113778711B (en) 2021-09-09 2021-09-09 Event processing method and device, electronic equipment and storage medium

Country Status (1)

Country Link
CN (1) CN113778711B (en)

Citations (8)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN102170609A (en) * 2011-03-09 2011-08-31 深圳市凯立德科技股份有限公司 Real-time information feeding method, device and server
KR101478227B1 (en) * 2013-11-05 2014-12-31 주식회사 시큐아이 Central management device processing event logs having different types and operating method thereof
WO2016149945A1 (en) * 2015-03-26 2016-09-29 华为技术有限公司 Life cycle event processing method and vnfm
CN109542592A (en) * 2018-11-22 2019-03-29 深圳墨世科技有限公司 Event-handling method and device
CN109976885A (en) * 2017-12-28 2019-07-05 中移物联网有限公司 Event-handling method, device and storage medium based on multiple task operating system
CN110851728A (en) * 2019-11-20 2020-02-28 软通动力信息技术有限公司 Event processing method, device, equipment and medium
CN111367694A (en) * 2020-03-18 2020-07-03 北京奇艺世纪科技有限公司 Event processing method, server and computer storage medium
CN112565455A (en) * 2020-12-23 2021-03-26 深圳市和讯华谷信息技术有限公司 Multi-event synchronous processing method, computer equipment and storage medium

Family Cites Families (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN107291548B (en) * 2016-03-31 2021-04-13 阿里巴巴集团控股有限公司 Task resource scheduling method and device
US10616041B2 (en) * 2017-11-30 2020-04-07 International Business Machines Corporation Collaborative triggers in distributed and dynamic computing systems

Patent Citations (8)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN102170609A (en) * 2011-03-09 2011-08-31 深圳市凯立德科技股份有限公司 Real-time information feeding method, device and server
KR101478227B1 (en) * 2013-11-05 2014-12-31 주식회사 시큐아이 Central management device processing event logs having different types and operating method thereof
WO2016149945A1 (en) * 2015-03-26 2016-09-29 华为技术有限公司 Life cycle event processing method and vnfm
CN109976885A (en) * 2017-12-28 2019-07-05 中移物联网有限公司 Event-handling method, device and storage medium based on multiple task operating system
CN109542592A (en) * 2018-11-22 2019-03-29 深圳墨世科技有限公司 Event-handling method and device
CN110851728A (en) * 2019-11-20 2020-02-28 软通动力信息技术有限公司 Event processing method, device, equipment and medium
CN111367694A (en) * 2020-03-18 2020-07-03 北京奇艺世纪科技有限公司 Event processing method, server and computer storage medium
CN112565455A (en) * 2020-12-23 2021-03-26 深圳市和讯华谷信息技术有限公司 Multi-event synchronous processing method, computer equipment and storage medium

Non-Patent Citations (1)

* Cited by examiner, † Cited by third party
Title
卢彦兆.中国优秀硕士学位论文全文数据库.全文. *

Also Published As

Publication number Publication date
CN113778711A (en) 2021-12-10

Similar Documents

Publication Publication Date Title
CN109033814B (en) Intelligent contract triggering method, device, equipment and storage medium
CN107918555B (en) Method and apparatus for processing data based on physical host
CN110287146B (en) Method, device and computer storage medium for downloading application
CN110377341B (en) Method, device, medium and electronic equipment for monitoring no-response exception
US10310909B2 (en) Managing execution of computer operations with non-competing computer resource requirements
CN110955640A (en) Cross-system data file processing method, device, server and storage medium
CN112860706A (en) Service processing method, device, equipment and storage medium
CN110633190B (en) Application program memory monitoring method, device, equipment and storage medium
CN110515749B (en) Method, device, server and storage medium for queue scheduling of information transmission
CN113778711B (en) Event processing method and device, electronic equipment and storage medium
CN112069158A (en) Data restoration method, device, equipment and storage medium
CN111581059A (en) Spark application monitoring method, system, equipment and storage medium
CN107168776B (en) Event statistical method, device, equipment and storage medium
CN112818204B (en) Service processing method, device, equipment and storage medium
CN115562859A (en) Data processing method and device, electronic equipment and computer storage medium
CN110602162B (en) Terminal evidence obtaining method, device, equipment and storage medium
CN111262727B (en) Service capacity expansion method, device, equipment and storage medium
CN111741046B (en) Data reporting method, data acquisition method, device, equipment and medium
CN110085237B (en) Recovery method, device and equipment of interactive process
CN111562974A (en) Method, device and equipment for acquiring offline data and storage medium
CN112306371A (en) Method, apparatus and computer program product for storage management
CN110704222A (en) Dump file analysis method and device, storage medium and electronic equipment
CN112416695B (en) Global variable monitoring method, device, equipment and storage medium
CN111682991B (en) Bus error message processing method and device
CN111046430B (en) Data processing method and device, storage medium and electronic equipment

Legal Events

Date Code Title Description
PB01 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination
GR01 Patent grant
GR01 Patent grant